KelpDAO’s rsETH Appears Hit by Reported $292 Million Exploit

KelpDAO’s rsETH Appears Hit by Reported $292 Million Exploit

New details indicate 116,500 rsETH were minted through a vulnerability, with most used on Aave to borrow ETH and the attacker extracting 106,466 ETH worth about $250 million.

ETH
AAVE
RSETH

Fact Check
The central claim has two parts: that KelpDAO's rsETH appears to have suffered an exploit, and that the attacker allegedly used Aave lending markets to sell or extract value from the stolen assets. The fetched article "ZachXBT Flags $280M+ KelpDAO Exploit Hitting Ethereum DeFi Lending Markets" directly supports both points, stating that an attacker reportedly exploited rsETH, deposited the acquired rsETH into Aave V3, and borrowed against it, creating bad debt. However, the same source reports losses above $280 million and says KelpDAO had not yet officially confirmed the exploit. Because direct access to the linked X posts failed and I could not validate an official KelpDAO or Aave statement in this run, the evidence remains report-based rather than fully primary. The wording "appears" and "reported" is therefore appropriate, but the specific "$100 million" figure is not supported by the validated source and is lower than the available reporting.
    Reference1
Summary

Updated reporting says the KelpDAO incident involved 116,500 rsETH minted through a vulnerability, resulting in losses estimated at $293 million. Most of the rsETH was deposited into Aave to borrow ETH, while a smaller portion was sold directly for ETH. The attacker ultimately obtained 106,466 ETH worth about $250 million. Earlier updates said Aave froze rsETH markets on V3 and V4, stated its own contracts were not attacked, removed borrowing capacity for rsETH, and began reviewing borrowing activity and potential bad debt linked to the exploit.

Terms & Concepts
  • rsETH: A token tied to KelpDAO’s Ethereum staking and DeFi ecosystem that is used across lending and other decentralized finance applications.
  • Aave V3: A version of the Aave decentralized lending protocol where users can supply crypto assets, use them as collateral, and borrow other assets.
  • bad debt: A lending shortfall that can occur when borrowed funds are not fully covered by remaining collateral after a market disruption or exploit.